MalwareTransportation & LogisticsTransportationRansomwareStolen CredentialsData EncryptedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Swissport North America, Inc.

bd_7b57309b7d9c6025 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 3, 2022

Filed

Sep 29, 2022

To disclose

34 weeks

Affected

1state residents only

Linked

6 filings

Confidence

65%

Full breach record for Swissport North America, Inc. →

Swissport North America, Inc. notified Montana residents of a data breach where an unauthorized individual gained access to systems between Feb 1-3, 2022, encrypting networks. Personal info including names, addresses, and government IDs was exposed. Swissport engaged forensic experts and law enforcement, took systems offline, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 34 weeks / 238 days

Feb 1, 2022

Begins

Feb 3, 2022

Discovered

Sep 29, 2022

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_ac9ddd7b5642fd1d2022-02-15 · +226dVerified by operator

Regulatory filings (4) · sorted by filing gap

Washington State AGbd_67d8ac191683015d2022-09-29Candidate
Indiana State AGbd_a711fcfdeb08f1ef2022-09-29Verified by operator
Massachusetts State AGbd_cc2f738c5f974f1e2022-09-29Verified
New Hampshire State AGbd_293d4702e58e22052022-10-03 · +4dVerified

Name: Swissport North America, Inc.
norm: swissport north america

Name: Swissport North America, Inc.
norm: swissport north america
Industry: Transportation & Logisticsllm

Discovered: Feb 3, 2022
Breach occurred: Feb 1, 2022 – Feb 3, 2022
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2022
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: engaged with law enforcement
Initial access: valid_credentials

During the incident: Launched a comprehensive investigation with the assistance of cybersecurity experts
Engaged with law enforcement
Took proactive measures to remove the unauthorized individual
Ensure the security of our systems
Affected servers were immediately taken offline and analyzed
Conduct a thorough and time-intensive review of the impacted information
Offering you a complimentary ## month membership of Experian’s IdentityWorks
Changes made: Took steps to further secure our systems to prevent an incident like this in the future
Continue to make additional improvements that strengthen our cybersecurity protections
Continue to monitor for any unauthorized uses of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(238 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Washington State AGSep 29 · first

Indiana State AGSep 29 · first

Massachusetts State AGSep 29 · first

Montana State AGSep 29 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-588.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2022
Raw hash: 72d3c8a0e9271c9dc8c64c009cd03de9ee3ec81d5764f5796415f3ccd4b756f8

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entitySwissport North America, Inc.

Victim entitySwissport North America, Inc.

Incidentdiscovered Feb 3, 2022

Stated responseLaunched a comprehensive investigation with the assistance of cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov